Privacy Policy

BraveHeart helps people with social anxiety practice real-life conversations privately. What you practice is often something you would not say to anyone you know. This policy explains what we collect, why, and your rights.

TL;DR

✓ Your voice never leaves our servers; we transcribe locally and discard the audio.
⚠ The text of your conversation is sent to a third-party AI provider so the role-play can continue.
✓ We never sell your data, never train any model ourselves, and never share your conversations with other users.

1. Data We Collect

Account data: email address, hashed password, display name, optional avatar.
Conversation text: messages you type or speak during practice, AI responses, scenario choices, and practice statistics.
Voice recordings: audio is streamed to our server, transcribed by self-hosted speech-to-text, and discarded after transcription.
Technical data: IP address, browser/device, timestamps for security and abuse prevention.
Payment data: processed by our payment provider. We do not store card details.

2. How We Use It

To provide the Service and route messages to an AI provider.
To prevent abuse, multi-account fraud, and runaway costs.
To provide private practice statistics and progress.
To send transactional emails.

3. Third-Party Services

The text of your messages may be sent to a third-party large language model so the AI character can respond. Please avoid putting real full names, phone numbers, addresses, or other identifying details into practice.

4. Your Rights

You can access, export, or delete your data. Email [email protected] for export or privacy requests.

5. Security

We use TLS in transit, hashed passwords, JWT-based auth, rate limiting, and Cloudflare protection. No system is perfectly secure; please use a strong, unique password.

6. Contact

Privacy questions: [email protected]